TWI292556B - Method and memory medium having machine instructions for securely booting up electronic device by hashing code provided for execution during boot-up of electronic device and electronic device related therewith - Google Patents

Abstract

Machine instructions comprising a bootstrap code are buried within a critical component of an electronic game console where they cannot readily be accessed or modified. A preloader portion in a read only memory (ROM) is hashed by the bootstrap code and the result is compared to an expected hash value maintained in the bootstrap code. Further verification of the boot-up process is carried out by the preloader, which hashes the code in ROM to obtain a hash value for the code. The result is verified against a digital signature value that defines an expected value for this hash. Failure to obtain any expected result terminates the boot-up process. Since the bootstrap code confirms the preloader, and the preloader confirms the remainder of the code in ROM, this technique is useful for ensuring that the code used for booting up the device has not been modified or replaced. <IMAGE>

Description

1292556

IX. INSTRUCTIONS OF THE INVENTION [Technical field to which the invention pertains] It is only necessary to recall that it has been activated to record its work. The present invention generally relates to the safe activation of a device including a processor and a more specific system. The machine instructions that are desired to ensure that the electronic device is activated are executed by the processor to prevent an alternate or other machine instruction from being executed during the startup process. [Prior Art] There are many electronic devices that must undergo a startup (b〇〇t-up) procedure during their initial charging or resetting. During the startup process, machine instructions that control the basic operational characteristics of the electronic devices are typically accessed from a vocal record (ROM) and executed to initialize the device and enable its machine instructions to be loaded. Into the random access memory (Ram), this command will be executed to enable the electronic device to perform other functions, such as when the computer is started, the basic input_output (BIOS) command will be It is executed to enable an operating system to be loaded from the hard drive into the RAM and executed by the central processing unit (CPU) of the computer. The term "boot-up" is an earlier and more descriptive, short form of the word "bootstrap". Other electronic devices that must be activated include the game console, the digital device "personal The data system 'and its electronic products containing some form of processor' must implement a set of initial machine instructions to have other capabilities when additional machine instructions are loaded into memory and executed. Because the startup program determines the initial shape of an electronic device, the direct shadow molding 5 1292556

The device is how to sell a host of the host of the game by the machine software of the game. For example, there is a certain system to remove the control that can be lost in the field where the tour takes change. The important operating parameters of the monthly fee have a substantial impact on the device being used after the startup process is completed. Preventing the start-up procedure from being changed is important to the company that sells the electronic device, which avoids the loss of revenue caused by the use of the guide. For example, in the video game industry, the commercial value of a commercially available video game machine is derived from the authorized revenue generated by the game executed on the game console. Therefore, the command to be loaded during the startup process can be implemented to prevent unauthorized game software from functioning on the game console and to implement the manufacturer's use of the game console for playing video games. Some users will perform without Authorized software limitations and policy implementation are seen as a challenge on the game console and an unwelcome limitation on game usage. These users break through these restrictions by "hacking" the circuit and software. One way to circumvent these restrictions is to cause a program to be loaded on a game console to load a modified software shuttle. Heart, the core things in the software have been changed. These changes will be imposed by the game console manufacturer, and this will give the manufacturer how the game console is used and will cause revenue loss if unauthorized game software Therefore, game console manufacturers usually have some methods to prevent hackers from executing a software core during the startup process. Similar problems exist in other technologies that electronic devices must be activated. For example, satellite TV The manufacturer of the receiver limits the channels that the user can receive according to the user's payment, and is required to be able to ensure that the 6 il 1292556 security policy and its product usage policy will be followed, so that the energy dissipation is based on the terms of the license. To use the electronic device. A hacker may change the software code to cause the processor in the satellite receiver to identify The usage fee is used to watch the TV channel, so that the user can receive and watch all the TV channels without paying. Therefore, it is necessary to ensure that only the authorized software code can be executed during the startup of an electric power. Any technique used to prevent a modified machine instruction set from replacing the authorized software that should be executed at the device, and thereby ensuring that the electronic device manufacturer and/or vendor desires to perform the function. And policies. Known methods used to protect against the use restrictions and policies of an electronic device (both of which are included in the software code bundle loaded during startup of the device) are not entirely successful. An add-in circuit card, the known security policy is at least partially broken, which couples the circuit card into the circuitry of the electronic device. A more secure and more rigorous method is needed to prevent The invention is inserted or executed during the startup procedure of the code sub-device. [Invention] The present invention can be generally applied to all of the initial charging including a processor. In the electronic device that must be activated when resetting, other functions for confirming the child device can be implemented. In this device, the ownership information is used during the operation of the security device and the program is prevented from being activated without the software code. It is very important to be executed during the period. The fee can only be paid by the repairer. The sub-device should be able to be implemented during the period to stop the hacker from apparently adding the hacker in the electronic. In the authorized 1292556 ea month repair (p is replacing the most likely to be replaced by the aging - electronic device's anti-sunshine policy and function of the components for storing non-volatile memory of the machine instructions, these machines cry The instruction defines how the electronic... is used. It is true that the code containing the machine instructions in this memory is authorized (ie, there is no function and policy that can change the electronic device). The code that has been modified or replaced by the machine code). In the present invention, the authorized code includes a predefined portion (also referred to as a preloader code). This pre-defined portion must remain the same, even if changes are made to other portions of the authorized code, or if the electronic device will not be activated. Eight-Piece Knife A program was first implemented to ensure that the pre-defined portion of the code is authorized. In this procedure, the pre-shake portion is hashed to produce a first hash value. The first hash value is then compared to a stored hash value, and the (4) stored hash value is stored in a circuit structure Φ ' / of the electronic device and the memory storing the code is The separate 'used' to confirm the pre-defined part of the code is authorized. If the value of the first-heavy value (four) is expected, then the predefined part of the code is executed, for example, 娄π „ If the difference is different, the start of the electronic device will be?, and stop. If the code is pre- If the definition part is enabled (ie, almost all codes are hashed), it can determine - the second hash value. The number:: name is included in the - part of the horse, which is different from the part The pre-analytic part of the code. The 篦-change, */le-heap value is then used to confirm the digital signature to ensure the authenticity of the material name. If the digital signature is confirmed to be true, Then the code can be stunned and if not true, the start of the electronic device is terminated. 8 1292556

In the processor, an audio processor is stored in another type of auxiliary wheel, a processor, a communication processor, or a digital signal processor. More preferably, the initial code and the expected hash value are stored in a processor that can execute the initial code. The initial code is executed to hash the predefined portion and perform the operation of comparing the first hash value to the stored hash value. In a preferred form of the invention, the initial code is permanently defined in a firmware to be a predetermined number of bits. Further, the predefined portion of the code preferably includes a preset. The number of bit codes that are set at a predetermined position of the code. Obviously, unless the stored hash value is changed correspondingly, the size and content of the predefined portion of the code cannot be modified because the stored hash value will not equal the first hash value. The pre-defined code also includes a machine instruction that is used by the public to read the digital signature and has a core portion that allows the encrypted portion of the code to be decrypted. The decrypted core is then executed to complete the electronic device boot. The preset code uses a stream cipher to implement the decryption of the core portion of the code. Another aspect of the present invention relates to a memory medium having a code stored thereon. The instructions, which are obtained during the start-up period 3 of the electronic device, are used to determine whether the code is authorized. The memory 栝 the core part, the boot loader part, the preloaded part of the bit signature. Another aspect of the invention pertains to an electronic device that must operate. The electronic device includes a non-volatile memory having a plurality of machine instructions. The non-volatile memory includes a main portion preloader portion having a predefined content, and a size and bit processor coupled to the non-volatile memory for commanding during startup. A start code firmware element specifies machine instructions, which refer to a hash algorithm and an expected hash value. The activation code sequence is initially initiated by the processor during startup of the electronic device, causing the processor to implement the hash of the preloaded portion and to compare the expected hash values. Other details of the electronic device and its body are identical to the method steps mentioned above. By using the present invention in a ray, the attempt of the game owner to change the machine command executed during the startup process or to replace another memory with a different command would make the device impossible. = move. Accordingly, the present invention can prevent a person from modifying the policy implemented by the electronic device by ensuring that only authorized code is executed during startup of the electronic device. Earthwork [Embodiment] It should be emphasized that, although the description of the case, the media package, and the number are activated on the storage points and settings. An executive machine defines a machine finger to perform the result and function of the machine. The machine function is enabled. The preferred embodiment of the present invention is not limited to the use of the book. 10

I292556 reveals to want to also limit and swim with that. The present invention has been developed to ensure that ownership information is removed from the user of the engineering code&apos; and to prevent the user from circumventing policies related to the licensing of electronic games. System 100 includes one

And 1 0 4 b. As shown in Fig. 1, an exemplary electronic game system game host 102 supports up to four and l〇4b. The game console 102 is shown in the figure) and a portable media optical storage medium, which is represented by an optical storage disc 108. Examples of suitable portable storage media include DVD discs and CD_R〇M discs. In this game system, the game program is preferably distributed on the DVd disc for use on the game console, but other storage media may also be used for implementation on the system using the present invention. Data security and ensuring the authenticity of the digital data entered into the system. There are four slots 11 on the front of the gaming machine 102 for the four controllers to be used, but the number and arrangement of the slots can be different. A power button j j 2 and an exit button 114 are also located on the front side of the game console 1〇2. The power supply device 12 controls the power supply to the game console, and the exit button 114 alternately turns on and off the tray (not shown) of the portable media device 1〇6, so that the storage optical disk 108 can be put in and taken out. The digital data on the disc can be read and used by the game console. Game console 102 is coupled to a television or other display monitor or screen via a video/audio (A/V) interface cable 120. A power cord plug 122 can deliver power to the game console when it is connected to a conventional AC power source (not shown). The game console 102 can be further provided with a data connector 1 24 for transmitting data over a network via a conventional telephone line data machine, or via a 1 1292556 OQ year (to replace a broadband connection, such as Each of the controllers 104a, 104b of the Internet is coupled to the game console 102 via a wire (or via an interface). In the illustrated embodiment, the controller is universally connected (USB) compatible. And connected to the game console 102 via USB. The game console 102 can be equipped with any of a number of devices to interact with the game software and control the game. Although all details of the controller 104a are not shown in Figure 1 xj - controller 104a The 104b is equipped with two thumb bars 132a and one D plate 1 3 4, buttons 136, and two triggers 1 3 8. These controls are representative and other known game input and control mechanisms can be substituted. Or added to the gaming machine shown in Figure 1. A removable or portable memory unit (MU) 140 may be inserted into the controller 104 to provide additional removable MU allows users to store game parameters The numbers and the parameters can be played on their machines by being inserted into other controllers. In the illustrated embodiment, each controller is built with two MUs, but more or less than the two MUs. The number can also be used to enable the monthly game system to play games, play music, and play its functions using digital data stored on the hard disk drive or read from the optical storage disk 108 loaded. Digital data, derived from resources, or digital data from MU14 0. The game master measures to prevent unauthorized video game discs from playing in the game. Moreover, certain policies are implemented via the game console. The software sold in the first geographic area is not wireless in a different geographical area. 'These lines use 130 kinds of software.', but every 132b, the device is only used to store necessary. Portable its main Cheng can accommodate. News. The machine on the 106 line is set up upstream, such as in the middle of the sale 12

Played on the game console sold in the month of 1292556. Moreover, an industrial phantom (MACROVISIONTM) that prevents video copying is implemented by the game console software. Some users want to defeat the functional limitations and rollovers implemented by the game console. One way to circumvent these restrictions and policies is to install an integrated circuit (1C) or module into the game console, replace the original ROM with a modified version and store it in ROM for use when the game console is started. The code used. The modification of the machine instructions in these replacement modules is to be operated during the startup process and eliminated or changed by the manufacturer or designer of the game console to prevent unauthorized use of the software, video DVD Copy, and other features and/or policies of the game console. However, the present invention makes it extremely difficult to insert an unauthorized replacement R〇M module to change the boot process, and can detect that someone is trying to use an alternate and unauthorized code during startup of the game console. The startup process can be terminated. In order to prevent the ownership information associated with the launcher from being discovered and to prevent the modified or altered code from being used during the startup process,

Yes, a 1C should be used for this purpose. I: An ic inside the road board becomes a firmware. The best is not available on the market because it is 13

!292556 The manufacturer of this electronic device is customized. Moreover, the ic used for this purpose is critical to the operation of the electronic device such that if an attempt is made to obtain a firmware embedded in the 1C, the operation of the 1C and the operation of the electronic device will be subject to negative effect. FIG. 2A shows several 1C components included in the game console 100. - CPU 202 is the primary processor and is used to perform most of the processing functions of the game core. The CPU 202 must be started as in most general processors at the beginning of a P4 to enable it to perform the different functions that the game core is designed to implement. The CPU 202 is bidirectionally coupled to a custom graphics processor which is also a bus and memory control chip 204 manufactured by NVIDIA Corporation and designed as an NV2A chip. The NV2A chip is connected to the RAM 206 and to another NVIDIA custom chip which is a Media Communications Processor (MCP) 208 (which provides the capability of the voice signal processor) and is coupled to the system memory and also to the USB埠 and the Ethernet network for data communication. A 512-bit firmware included in the MCP 208 includes a boot code 212. The enabler code 212 is substantially buried underneath the other layers of the MCP 208 and cannot be obtained by splitting the module apart. In order to physically obtain the boot code 212, it is necessary to remove the layers above, which will destroy the MCP module, rendering the module and the game console unusable. Also, because the MCP208 is customized by the game console manufacturer, others cannot be obtained from the open market. Even if the boot code is obtained in some way, the machine instructions containing the firmware are "seen", and the present invention will make the boot program unchangeable. The MCP 208 is coupled to a ROM 210 that includes most of the machine fingers that the game console 1 must use at startup 14 1292556

A more general application of one of the present inventions is shown in the element structure of Figure 2B. A customized CPU 220 can include, embed, and firmware boot code 222 therein and under other cpu layers. As shown in Fig. 2B, cpu22〇 is combined to RAM 206 and ROM 210. Since the boot code 222 includes the firmware in the CPU 222, the signal between the CPU processing portion and the boot code 222 is not available. Therefore, for the embodiment shown in FIG. 2B, the boot code 222 is obtained and determined. The content is more difficult, so the embodiment of the πth diagram can provide greater security than the embodiment of Figure 2A. Figure 3 shows the different parts of the ROM 210 used in the present invention. In a preferred embodiment, the memory module used by the game console 1 to include a 256K byte memory module is included in the κ〇Μ2ΐ〇 is a preloader 230. Not passwordd (enCrypted). Preloader 230 has a fixed size of about 11K bytes in the preferred embodiment, and its content, size, and location in ROM 2 10 are all predefined. It is important that the preloader 230 includes a cryptographic public key 231. It is also important that the contents of the preloader 230 be maintained unchanged unless the firmware activation code 2 1 2 has a corresponding change, as will be clearly explained in the following description. ROM 210 also includes a boot loader 232 which is cryptographically encoded. In addition, ROM 210 includes a digital signature 234 and a symmetric key 236. Obviously, most of ROM 2 10 is used to store machine instructions containing a kernel 238. Core 238 is compressed and cryptographic at the same time. The machine instructions included in the core 238 define most of the functionality and establish policies associated with the game console. Finally, a chipset 15 1292556 initialization code 2 4 0 is included when the game console begins to be charged. Figure 4 shows the logical steps of the game console 1 〇 2 being charged or being implemented. Step 25: Let the chipset initialization be performed in R0M2 1 0. The commands included in the chipset initialization code 240 are unencrypted; they define the information and specific configuration procedures that are appropriate for the particular configuration used in the complete machine architecture. The chip set configuration that must be implemented is included in the boot code; the particular program is part of the chipset initialization code. Moreover, the program of the CPU is included in the boot code and is executed before the wafer set initialization code. Next, at block 252, the machine command included in the firmware boot code 2 1 2 embedded therein is traversed by a one-way hash to determine a hash of the preloader 230 in the ROM 210. And, in the original ROM 210 that is installed at the time when the game console 1 is manufactured, the preloader 230 has a specific size and a position within the ROM 210. Therefore, the hash values obtained by hashing the machine instructions included in the processor 230 remain the same as long as the preloader 230 is not unauthorizedly changed or replaced. In the preferred embodiment, a SHA-1 one-way hash is applied to hash the preloader. Alternatively, a splicing algorithm can be used, and those skilled in the art will appreciate that other hash calculus is used. The hash algorithm used is included in the boot code 2 1 2 instruction. Also included in the boot code 2 1 2 is a stored hash and the reset code 240 machine refers to the value of the game master machine code and the initialization remainder MCP208 algorithm t. As above, f content, preloading should always be coded by the algorithm MD5 can also be used by the machine value of 16

Ιί 1292556 *The expected hash of the Hai preloader 2 3 0 loads the stored messy instructions from the boot code. The hashing step determined by the preloader 220 from the boot code 2 5 6 The actual hash value used to determine the setting is implemented. If the machine instruction is not the same, step 258 is executed to terminate the program. Therefore, if there is a ROM, the new or unused preloader portion will be tested for the change value of the preloader 230 with a preload of the expected hash value and a symmetric gold. key. Step 254 is to make up the value. The machine stored hash value in the start code 212 is compared to the value in step 252. The comparison is in a decision as to whether the stored hash value is equal to the determined, etc., in the boot code 212, which will replace the original authorized ROM with the different ROM of the game console 2 It does not include an identical part of the one-way hash algorithm when it is processed, and decision step 256 will detect and terminate the starter. Assuming that the stored hash value is equal to the actually determined hash value, then step 210 will execute the $ command with the 1 〇 preloader code portion. This step can be implemented because the preloader machine instructions are very similar to the machine instructions originally included in the ROM installed by the game console manufacturer in the game console. Next step 262 determines a hash value for the entire ROM 210 in addition to the Qinzi signature 234 &lt; The preloader also includes machine instructions for determining a one-way hash value and preferably uses a SHA-1 or MD5 hash algorithm (or any one-way hash algorithm known to those skilled in the art). To determine the hash value of most of the contents of R0M2 10 (the digital signature is not included in the r杂m hashed content). As long as the same hashing rule is used, the result will always be the same 'unless the machine command has been changed, or replaced by an unauthorized machine command 17 1292556 匕" 9th 〒). Even if only change R0M2 1 0 The one-bit element of the hashed machine instruction will change the hashed value. The public key 231 in ROM 210 is used in step 264 to generate a corresponding value for the digital signature on signature 234. (The key is decrypted by the key stored in the activation code of the MCP before the key can be applied, but if the public key is not coded by the key, then this step is not In the decision step 266 of the name map, the machine in the preloader mo instructs whether the public key can confirm the signature; this step determines whether the value from 264 is equal to the one determined in step 262. If the R〇M is not equal, then step 268 will stop the startup operation because the signature in the middle has been changed. As is known, if the signature value is only known to the manufacturer of the game console. If the signature of the private gold is signed, the identification of the signature can be confirmed by using a public money. If some of the game hosts 1 〇〇 and try to change any part of r〇M2 1 ,, the hash value The change above will be detected in step 266, and the launch procedure is terminated in step 268. Conversely, if the hash value of the digital signature ROM matches, the content of r〇m will be the same as the authorized original content. Assuming that the value of the digital signature determined in step 264 is correct for the hash value of r〇m in decision 2 66, then step 27 can be passed to completion until the core 238 is copied to RAM 206. Decompress and decrypt the password into the RAM. The preloader 23 includes a machine instruction that decrypts the initiator. The pair is held in the MCP. The pair is symmetrical in the firmware. The fourth decision step: value ROM use words, the name of the human attack and the original step into the passive load start 18 1292556 code symmetric key combined with the symmetric key 236 in the ROM 210 used to generate a new symmetric code, It is used in accordance with the preloader The boot command will initiate the loader decryption. The boot loader includes a stream cipher (stream) for implementing a compressed and cryptographic core in accordance with the RC4 stream cipher algorithm known to those skilled in the art. Cipher) machine instructions for decrypting passwords. Machine instructions containing cores that have been decompressed and decrypted into RAM 206 can then be executed by CPU 202 to implement the full functionality of the gaming machine to ensure that it is only loaded and authorized. The game software executes an algorithm that blocks the copying of the video DVD' and ensures that it implements all other policies and functions that the game console manufacturer desires and is defined in the authorized activation code. While the present invention has been described in terms of the preferred embodiments, it will be understood by those skilled in the art that many variations can be made without departing from the scope of the invention as defined by the appended claims. Therefore, the scope of the present invention is not limited to the above description, but is completely defined by the scope of the following claims. BRIEF DESCRIPTION OF THE DRAWINGS The above-described aspects and many other advantages of the present invention will become readily apparent from the following detailed description of the appended claims. Stereogram; Figure 2A is a number of functional 1292556 included in the game console of Figure 1.

A functional block diagram of a general electronic device; Fig. 3 is a schematic view showing a portion of a memory constructed in the present invention; and Fig. 4 is a flow chart showing the logical operation in the present invention. [Simplified Description of Component Symbols] 100 Video Game System 102 Game Console 104a, 104b Controller 106 Portable Media Player 108 Optical Storage Disc 110 Slot 112 Power Button 114 Exit Button 120 Video/Audio (A/V) Interface Wire 122 Power cord plug 124 Data connector 130 USB cable 132a, 132b Thumb lever 134 D - board 136 button 138 Trigger 140 Memory unit 202 Central processing unit (CPU) 204 Bus and recorder control chip 206 RAM 208 Media communication Processor (MCP) 210 ROM 212 Startup Code 220 CPU 222 Firmware Startup Code 230 Preloader 231 Public Gold 232 Boot Loader 234 Digital Signature 236 Symmetric Key 238 Core 240 Chipset Initialization Code 20

Claims (1)

1292556 t :,: Buddy shoulders clearly show 'special: heart: ^ 嗲 嗲 有 . _ _ _ _ _ _ _ _ _ _ _ _ ϋ ϋ ϋ ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; 十What is claimed is: 1. A method of safely activating an electronic device by performing a code provided during startup of an electronic device, the method comprising at least the following steps: (a) hashing a predefined portion of the code Used to generate a first hash value; (b) comparing the first hash value to a stored hash value held in a circuit component of the electronic device to confirm the predefined portion of the code Is authorized, wherein the circuit component is separate from the memory in which the code is stored; (c) if the first hash value is equal to the stored hash value, then the predefined portion of the code is allowed to be executed, and if If it is not equal, the activation of the electronic device is terminated; (d) wherein the predefined portion of the code that is authorized to perform the following steps is performed: (i) substantially tying the owner of the code to determine a Second hash value; and (ii) confirmation included in the code Whether the one-digit signature in the match matches the second hash value, and if so, allows the code to be executed, and if not, terminates the activation of the electronic device. 2. The method of claim 1, wherein the step of comparing the first hash value to the stored hash value comprises performing a non-volatile storage portion of the circuit component maintained at 21 1292556. The step of the initial code, the initial code including the stored hash value. 3. The method of claim 2, wherein the initial code is maintained in an auxiliary processor. 4. The method of claim 2, wherein the initial code is maintained in one of: (a) a graphics processor; (b) an audio processor; (c) an input processor; (d) - an output processor; (e) - a communications processor; and (f) a digital signal processor. 5. The method of claim 2, wherein the initial code is maintained in a processor that can execute the initial code. 6. The method of claim 2, wherein the initial code is executed to perform steps (a) through (c) of claim 1 of the scope of the patent application. 7. The method of claim 2, wherein the initial code system is permanently defined in the firmware as a predetermined number of bytes. 22 1292556 g~Zg &quot;&quot;&quot; Monthly Repair (^) is replacing the page. The predefined preset digits are included in the startup period. The machine refers to a number of memory media that are mainly included in the group. The method of clause 1, wherein the portion of the code comprises a preloader code having a predetermined number of bytes set at a location of the code. 9. The method of claim 8, wherein the step of confirming the name is performed using a public key, the public key being in the preloader code. 10. A memory medium comprising a command for securely activating the electronic device by executing a supplied code between a plurality of electronic devices, the memory medium comprising at least: (a) a core portion including The portion of the machine instructions of the code is stored in the core portion; (b) a boot loader portion designed to load machine instructions in the core portion of the package for execution by the electronic device; (c) a pre- a loader portion having a predefined bit and a predefined content, the preloader portion being disposed at a predetermined position on the body; and (d) a digital signature portion, the digit The signature portion provides a value for comparison with the hash value obtained by hashing the code, and is used to determine whether the code is authorized. 1292556 11. The memory medium of claim 10, wherein the preloader portion includes a public key that can be used to decrypt the signature portion 〇1 2 · as claimed The memory medium of item 10, wherein the memory medium comprises a read-only memory. 13. The memory medium of claim 10, wherein the preloader portion comprises machine instructions defining a one-way hash algorithm. 14. The memory medium of claim 10, wherein the preloader portion comprises machine instructions that can identify the digital signature using a public key stored in the preloader portion. 1 5. The memory medium of claim 10, wherein the core portion is encoded. 16. The memory medium of claim 10, wherein the preloader portion comprises machine instructions for implementing a stream cipher decryption of the core portion. 17. The memory medium of claim 10, wherein the preloader portion includes at least one public key for identifying a corresponding 24 1292556 The signature signed by the private key. 18. An electronic device that is safely activated by hashing a code provided during startup of the electronic device, the electronic device comprising at least: (a) a non-volatile memory having a plurality of machine codes stored thereon The non-volatile memory includes a main portion, and a preloader portion whose content, size and position are predefined; (b) a processor coupled to the non-volatile memory for executing the machines (c) a bootstrap code firmware element that specifies a machine instruction that defines a hash algorithm and an expected hash value, the machine command of the boot code firmware being activated at the electronic device The period is executed by the processor, causing the processor to perform the following actions: (i) hashing the non-volatile memory preloader portion to determine a preloader hash value; (ii) comparing the expectation The hash value and the preloader hash value; and (iii) if the preloader hash value is not equal to the expected hash value, terminating the start of the electronic device. The electronic device of claim 18, wherein the preloader portion of the non-volatile memory comprises machine instructions that cause the processor to perform the following actions: 25 1292556 (a) will talk about non-volatile memory hashing to produce a memory value; (b) compare the memory hash value with a expected memory hash value included in the preloader; And (c) if the memory hash value is not equal to the expected memory value, the activation of the electronic device is terminated. The electronic device of claim 19, wherein the memory hash value is included in the non-volatile memory as a digital signature 'but when the volatile memory is mixed Exclusion 0 2 1 - The electronic device of claim 20, wherein the machine command in the preloader portion of the volatile memory can cause the processor to recognize the digital signature to determine the The expected body hash value. 22. The electronic device of claim 20, wherein the machine instructions in the preloader portion of the volatile memory further implement the processor to apply a public key included in the preloader portion. To identify the digital signature. 23. The electronic device as claimed in claim 18, wherein the body part of the body is expected to be volatilized except in the non-single memory, the non-stepping group is not swayed by the singularity of the money. At least a portion of a main portion of the pageable memory is encrypted, and wherein the non-volatile memory preloader includes the at least a major portion of the non-volatile record that the processor is to be cryptographically encoded A portion of the decrypted machine instructions enable the activation of the child device to continue executing the machine instructions included in the main portion of the non-volatile body. 24. The electronic device of claim 18, wherein the code body element is disposed in another element of the electronic device and destroys the other element to make the electronic device inoperable substantially The boot code firmware component cannot be accessed. The electronic device of claim 24, wherein the component comprises an auxiliary processor. 26. The electronic device of claim 24, wherein the component comprises one of: (a) a graphics processor; (b) an audio processor; (c) an input processing (d) - an output processor; (e) - a communications processor; and (f) a digital signal processor. Part of the password, the memory, the memory, the start, the other, the other, 27 The electronic device of claim 18, wherein the activation code firmware component is disposed within the processor. The electronic device of claim 18, wherein at least a portion of the main portion of the non-volatile memory is encrypted, and wherein the preloader portion of the non-volatile memory includes (a) machine instructions defining a one-way hash algorithm; (b) machine instructions for decoding at least a portion of the main portion of the non-volatile memory; (c) machine instructions including a boot loader; And (d) at least one public key. 29. The electronic device of claim 18, wherein the electronic device comprises a game console. 28 1292556 VII. Designated representative map (1) The designated representative map of the present case is: 4th gang (2), the representative of the representative figure is a single description: 250 execution of the chipset initialization code 268 stop start operation 252 determines the pre-ratio of R〇M The hash value of the loader portion 270 completes the start operation 254. The stored hash value of the preloader is loaded into the 250 stored hash value = actual hash value? 258 Stop Start Operation 260 Execute Preloader Code Section 262 Determine the hash value of the entire ROM (other than signature) 264 Apply the public key to the signature to determine the signature value 266 Is the public key confirming that the signature is true? 8. If there is a chemical formula in this case, please disclose the chemical formula that best shows the characteristics of the invention: